resource "stackit_service_account" "this" {
  name       = var.service_account_name
  project_id = var.stackit_project_id
}

resource "time_rotating" "this" {
  rotation_days = 3
}

resource "stackit_service_account_key" "this" {
  count = var.service_account_create_key ? 1 : 0

  project_id            = var.stackit_project_id
  service_account_email = stackit_service_account.this.email
  public_key            = var.service_account_public_key
  rotate_when_changed   = var.service_account_rotate_when_changed
  ttl_days              = var.service_account_ttl_days
}

resource "stackit_server_service_account_attach" "this" {
  count = var.attach_to_server ? 1 : 0

  project_id            = var.stackit_project_id
  server_id             = var.server_id
  service_account_email = stackit_service_account.this.email
}